6a543fa9110f167c69e63e749edb88cd4e189a363beb72c83e03c0ade72ef602 | Triage

Analysis

max time kernel
41s
max time network
47s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 12:34

Sharing

Report Analysis Logs

General

Target

6a543fa9110f167c69e63e749edb88cd4e189a363beb72c83e03c0ade72ef602.exe
Size

790KB
MD5

05ea1fb909759dd7235bcca3622984f0
SHA1

2d8acb60dadfa1d53f3e3749670ee227dd25d208
SHA256

6a543fa9110f167c69e63e749edb88cd4e189a363beb72c83e03c0ade72ef602
SHA512

46c2026d48803053f17e10863a07721b78b50796f71125a89d034c94abbea89efd4f00dc6ee18d3be5f9cf7eb5ad2dc1dc68c83d20b7aaf46fb353996c099267
SSDEEP

24576:8MQOjRGmay4PA5NLqDYXyvDB2NeJfGaJYko:FNGfQNuN7seJ+2Yko

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\6a543fa9110f167c69e63e749edb88cd4e189a363beb72c83e03c0ade72ef602.exe
"C:\Users\Admin\AppData\Local\Temp\6a543fa9110f167c69e63e749edb88cd4e189a363beb72c83e03c0ade72ef602.exe"
1⤵
PID:1632

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-54-0x0000000076BA1000-0x0000000076BA3000-memory.dmp

Filesize
8KB

Download